Application Security

GDS security engineers assess many of the largest enterprise financial and banking applications in commercial use today. These complex applications store and provide access to highly sensitive financial data and are used by millions of customers on a daily basis.

GDS specializes in performing security code review and black box testing of both custom-built applications as well as third party "off-the-shelf" software products. Please select one of the GDS application testing services to learn more.

Black Box Testing

The GDS Black-Box security testing methodology leverages both manual and automated testing techniques to assess the security of a live instance of the targeted application. The objective is to gauge the threat of both unauthorized outsiders and legitimate users compromising application security controls.

Source-Driven Testing

GDS Source-Driven assessments uncover security vulnerabilities and their development root causes in the source code of mission-critical business applications. The GDS methodology combines manual code review techniques, proprietary application security directives (ASDs), and the use of premier proprietary and commercial source code analysis tools in a consistent and repeatable process.

Vulnerability Remediation

Minimizing the time required to correctly address high risk application security vulnerabilities is the goal of the GDS Vulnerability Remediation service line. GDS works directly with company management and development teams to provide a prioritized and detailed game plan for addressing identified security flaws in the context of the client’s application environment.

Secure Development Services

Early prevention of application vulnerabilities is far more secure and cost effective then implementing post-production "band-aid" security fixes. GDS offers Secure Design & Architecture guidance and consulting, as well as developer mentoring and ad-hoc security testing during the code implementation phase. These services help avoid expensive redesign and patchwork coding efforts associated with insecure design and systemic code implementation flaws which are often discovered too late in the development lifecycle.